CVE-2022-41918 (opensearch) | allinfosecnews.com

Nov. 15, 2022, 11:15 p.m. |

National Vulnerability Database web.nvd.nist.gov

OpenSearch is a community-driven, open source fork of Elasticsearch and Kibana. There is an issue with the implementation of fine-grained access control rules (document-level security, field-level security and field masking) where they are not correctly applied to the indices that back data streams potentially leading to incorrect access authorization. OpenSearch 1.3.7 and 2.4.0 contain a fix for this issue. Users are advised to update. There are no known workarounds for this issue.

More from web.nvd.nist.gov / National Vulnerability Database

CVE-2023-45955 (lightstrip_firmware) 6 months, 1 week ago | web.nvd.nist.gov

attackers cve denial of service issue +1

CVE-2023-40101 (android) 6 months, 1 week ago | web.nvd.nist.gov

android check collapse cve +7

CVE-2023-21377 (android) 6 months, 1 week ago | web.nvd.nist.gov

android bypass cve disclosure +8

CVE-2023-21380 (android) 6 months, 1 week ago | web.nvd.nist.gov

android bluetooth buffer buffer overflow +9

CVE-2023-21382 (android) 6 months, 1 week ago | web.nvd.nist.gov

access android check cve +11

CVE-2023-21381 (android) 6 months, 1 week ago | web.nvd.nist.gov

android arbitrary code code code execution +10

CVE-2023-21385 (android) 6 months, 1 week ago | web.nvd.nist.gov

android corruption cve disclosure +7

CVE-2023-21387 (android) 6 months, 1 week ago | web.nvd.nist.gov

android backup bypass cve +11

CVE-2023-21389 (android) 6 months, 1 week ago | web.nvd.nist.gov

android bypass check cve +10

Embedded VSOC Analyst

@ Sibylline Ltd | Australia, Australia

View on infosec-jobs.com

Cloud Security Platform Engineer

@ Google | London, UK; United Kingdom

View on infosec-jobs.com

Senior Associate Cybersecurity GRC - FedRAMP

@ Workday | USA, VA, McLean

View on infosec-jobs.com

Senior Incident Response Consultant, Mandiant, Google Cloud

@ Google | Mexico; Colombia

View on infosec-jobs.com

Cyber Software Engineering, Advisor

@ Peraton | Fort Gordon, GA, United States

View on infosec-jobs.com

Cloud Security Architect (Federal)

@ Moveworks | Remote, USA

View on infosec-jobs.com